Supply chain
β Supply Chain
UK's defence ministry and the Cabinet Office Third-Party Breach (August 2025)
Primary Source βIncident Details
Cyber-attack on MoD-linked contractor exposes data of Afghans in resettlement scheme. Breach at Inflite The Jet Centre is latest in series of leaks involving private information of Afghan refugees. A contractor linked to the UK Ministry of Defence has been hit by a cyber-attack, exposing personal data linked to Afghan resettlement efforts. It is the latest in a series of breaches involving the private information of Afghan refugees. The breach at Inflite The Jet Centre Ltd, a company that provides ground services for flights linked to the UKβs defence ministry and the Cabinet Office, has exposed the personal data of up to 3,700 people, including Afghans seeking refuge as part of the Afghan Relocations and Assistance Policy. Third-party company: Inflite The Jet Centre Ltd.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- Inflite The Jet Centre Ltd
- Supply Chain Attack
- β Confirmed third-party / vendor compromise
Timeline
- 2025-08-01 Breach occurred
- 2025-08-16 Publicly disclosed